GINC-APT-0453 · Tracked, unattributed

Storm-1575

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
5 sources carry it
Identifier
GINC-APT-0453 · storm-1575

What it is

Storm-1575 is a threat actor identified by Microsoft as being involved in phishing campaigns using the Dadsec platform. They utilize hundreds of Domain Generated Algorithm domains to host credential harvesting pages and target global organizations to steal Microsoft 365 credentials.

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de